ESET NOD32 Antivirus Multiple Remote Vulnerabilities

Bugtraq ID:	24988
Class:	Unknown
CVE:	CVE-2007-3971 CVE-2007-3972 CVE-2007-3970
Remote:	Yes
Local:	No
Published:	Jul 20 2007 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Sergio Alvarez of n.runs AG is credited with the discovery of these vulnerabilities.
Vulnerable:	Eset NOD32 Antivirus 0
Not Vulnerable:	Eset NOD32 Antivirus 2.2289

ESET NOD32 Antivirus Multiple Remote Vulnerabilities

ESET NOD32 Antivirus is prone to multiple remote vulnerabilities. These issues include a heap-memory-corruption vulnerability and multiple denial-of-service vulnerabilities.

An attacker can exploit these issues to execute arbitrary code with administrative privileges or cause the affected application to crash.

These issues affect versions prior to ESET NOD32 2.2289.

ESET NOD32 Antivirus Multiple Remote Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ESET NOD32 Antivirus Multiple Remote Vulnerabilities

Solution:
The vendor has released patches to address these issues. The vendor states that the application's automatic update feature should install the patches.

ESET NOD32 Antivirus Multiple Remote Vulnerabilities

References:

• ESET Homepage (ESET)
  
• 2007-07-20 - n.runs-SA-2007.016 - NOD32 Antivirus CAB parsing Arbitrary Code Exe ([email protected])
  
• 2007-07-20 - n.runs-SA-2007.017 - NOD32 Antivirus ASPACK parsing Infinite Loop A ([email protected])
  
• 2007-07-20 - n.runs-SA-2007.018 - NOD32 Antivirus ASPACK and FSG parsing Divide ([email protected])
  
• n.run Parsing Engine Advisories (n.run )